This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wJuHqUff_kBgyPG5Miv0RURyS5M.roa
File: wJuHqUff_kBgyPG5Miv0RURyS5M.roa (raw, json)
Hash identifier: K22zeWk+WXdcro1Myj6kk4kg82SSPrPRWSxV2VfOFTk=
Subject key identifier: C0:9B:87:A9:47:DF:FE:40:60:C8:F1:B9:32:2B:F4:45:44:72:4B:93
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F8510CA16A9D6DCFD2FF1FAA0F481C8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wJuHqUff_kBgyPG5Miv0RURyS5M.roa
Signing time: Fri 02 Jan 2026 16:23:05 +0000
ROA not before: Fri 02 Jan 2026 16:23:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212118
IP address blocks: 93.171.212.0/24 maxlen: 24
2a02:128:4100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:10:ca:16:a9:d6:dc:fd:2f:f1:fa:a0:f4:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:23:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c09b87a947dffe4060c8f1b9322bf44544724b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:93:29:e0:29:5c:81:19:e7:11:e1:ec:95:
8a:15:24:7d:4d:5a:6a:40:55:2c:f5:ed:f6:99:0d:
2d:8c:1b:6a:e5:f0:a3:bd:3a:41:0f:08:62:a7:47:
d8:53:d3:e5:e5:5a:46:9d:7a:e5:f6:cc:03:cd:77:
77:d6:93:4f:aa:5a:ea:94:32:d1:ab:27:25:86:0e:
1b:3e:c1:68:23:24:4a:ac:77:9a:69:c0:1b:8f:8b:
b6:57:a5:fc:f7:db:05:99:2f:2d:f0:2f:54:96:c5:
0d:0b:40:df:72:89:7e:d5:a1:c2:82:bd:0e:1c:8c:
19:c8:91:cd:c3:be:06:5d:7b:b7:52:78:e6:36:50:
34:c6:b2:71:6f:cf:cb:32:fc:79:d9:c2:80:6d:d1:
03:cc:03:26:93:42:75:a4:30:46:eb:1b:d7:fd:cd:
81:d3:b4:a3:9b:c8:61:5d:2d:0f:46:d0:52:c6:b3:
50:5e:14:e0:d6:9c:ee:8b:42:50:e9:7c:e3:63:c6:
d0:8a:fd:8b:b7:23:bb:83:91:f3:df:5d:b3:5e:f2:
64:92:b2:be:d9:f3:56:f8:5f:b3:60:ac:34:ee:06:
1d:27:02:6c:02:33:b7:8c:d6:ba:41:fa:2f:53:b3:
4c:15:5b:14:31:5f:95:e5:3e:35:8b:24:59:4f:0f:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9B:87:A9:47:DF:FE:40:60:C8:F1:B9:32:2B:F4:45:44:72:4B:93
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wJuHqUff_kBgyPG5Miv0RURyS5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.212.0/24
IPv6:
2a02:128:4100::/44
Signature Algorithm: sha256WithRSAEncryption
58:13:dd:95:c8:f0:dd:09:00:97:fa:00:91:b6:2d:94:55:ca:
1d:4b:41:9e:c8:b2:de:61:a8:8b:10:bc:84:0a:b9:6d:02:84:
78:3a:84:7a:7f:78:9a:f1:ac:75:ee:2c:0d:c5:53:5a:a8:27:
6a:eb:bb:f5:4d:0e:08:f8:3e:0b:80:66:c3:81:39:88:24:aa:
4b:f9:44:74:5f:8b:13:60:4f:26:bf:16:0f:22:58:d6:d2:ed:
76:a8:3d:7c:89:77:ea:e8:1e:69:f2:e5:ee:f4:be:fa:4d:26:
00:01:91:59:c9:42:66:e2:6d:dc:92:0c:af:4a:b8:96:72:b1:
7a:0f:bf:ed:d6:24:69:b2:bc:7d:22:36:c3:47:f0:74:b9:f9:
63:16:8f:a2:cb:62:94:17:91:ef:c9:93:2e:51:9b:ab:2d:f3:
2d:50:52:a6:d5:a0:c9:03:54:4a:2a:6d:30:49:90:3e:4f:96:
94:83:0a:bc:57:5d:d6:1b:01:4c:e6:23:3f:d8:a8:31:d8:92:
06:e7:86:07:c8:37:b3:d4:22:d1:3d:1d:e8:0f:2a:9b:e0:a8:
e6:ee:fd:e6:00:33:67:99:2b:d5:2f:3d:6d:68:eb:94:76:b9:
4a:f8:9c:a9:74:26:40:46:87:dd:54:29:cb:54:02:c8:d2:a5:
3e:00:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:38 2026 by rpki-client